Detections
Analytics
Oracle WebLogic Server Multiple Vulnerabilities (April 2017 CPU)
critical Nessus Plugin ID 99528
Language:
Synopsis
An application server installed on the remote host is affected by multiple vulnerabilities.Description
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities :- A remote code execution vulnerability exists in the Apache Struts component due to improper handling of multithreaded access to an ActionForm instance. An unauthenticated, remote attacker can exploit this, via a specially crafted multipart request, to execute arbitrary code or cause a denial of service condition.
(CVE-2016-1181)
- An unspecified flaw exists in the Web Services subcomponent that allows an unauthenticated, remote attacker to modify or delete arbitrary data accessible to the server. (CVE-2017-3506)
- A remote code execution vulnerability exists in the Web Container subcomponent due to improper handling of reflected PartItem File requests. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary code.
(CVE-2017-3531)
- A remote code execution vulnerability exists in the Apache Struts component in the Jakarta Multipart parser due to improper handling of the Content-Type, Content-Disposition, and Content-Length headers.
An unauthenticated, remote attacker can exploit this, via a specially crafted header value in the HTTP request, to execute arbitrary code. (CVE-2017-5638)
Solution
Apply the appropriate patch according to the April 2017 Oracle Critical Patch Update advisory.See Also
http://www.nessus.org/u?623d2c22
http://www.nessus.org/u?eb4db3c7
https://support.oracle.com/rs?type=doc&id=2228898.1
https://www.tenable.com/security/research/tra-2017-16
https://www.zerodayinitiative.com/advisories/ZDI-16-444/
http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html
Plugin Details
Severity: Critical
ID: 99528
File Name: oracle_weblogic_server_cpu_apr_2017.nasl
Version: 1.17
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 4/21/2017
Updated: 6/5/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.2
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2017-5638
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 9.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:X
Vulnerability Information
CPE: cpe:/a:oracle:weblogic_server, cpe:/a:oracle:fusion_middleware
Required KB Items: installed_sw/Oracle WebLogic Server
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/18/2017
Vulnerability Publication Date: 6/7/2016
CISA Known Exploited Vulnerability Due Dates: 5/3/2022, 6/24/2024
Exploitable With
CANVAS (CANVAS)
Core Impact
Metasploit (Apache Struts Jakarta Multipart Parser OGNL Injection)
Reference Information
CVE: CVE-2016-1181, CVE-2017-3506, CVE-2017-3531, CVE-2017-5638